thibaud-lclr/api-client
1
0
Fork 0
Code Packages Activity Actions

fix(native): bump tauri-plugin-shell to v2.2.1 (#5402)

Browse source 
Updates `tauri-plugin-shell` from vulnerable version to `v2.2.1` to
 address `CVE-2025-31477` in `open` around scope validation.

 Affects both `hoppscotch-agent` and `hoppscotch-desktop`.

 Closes FE-1022
This commit is contained in:
Shreyas 2025-09-24 21:48:06 +05:30 committed by GitHub
parent 220c9abe43
commit 6beca5c787
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
9 changed files with 932 additions and 515 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
packages/hoppscotch-agent/package.json
View file

@ -12,7 +12,7 @@
"dependencies": {
"@hoppscotch/ui": "0.2.5",
"@tauri-apps/api": "2.1.1",
"@tauri-apps/plugin-shell": "^2.0.0",
"@tauri-apps/plugin-shell": "^2.2.1",
"@vueuse/core": "13.7.0",
"axios": "1.12.2",
"fp-ts": "2.16.11",

429
packages/hoppscotch-agent/src-tauri/Cargo.lock generated
View file

File diff suppressed because it is too large Load diff

2
packages/hoppscotch-agent/src-tauri/Cargo.toml
View file

@ -16,7 +16,7 @@ tauri-build = { version = "2.0.1", features = [] }
[dependencies]
tauri = { version = "2.0.4", features = ["tray-icon", "image-png"] }
tauri-plugin-shell = "2.0.1"
tauri-plugin-shell = "2.2.1"
tauri-plugin-autostart = { version = "2.0.1", optional = true }
serde = { version = "1", features = ["derive"] }
serde_json = "1"

2
packages/hoppscotch-desktop/package.json
View file

@ -29,7 +29,7 @@
"@tauri-apps/api": "2.1.1",
"@tauri-apps/plugin-fs": "2.0.2",
"@tauri-apps/plugin-process": "2.2.0",
"@tauri-apps/plugin-shell": "2.0.1",
"@tauri-apps/plugin-shell": "2.2.1",
"@tauri-apps/plugin-store": "2.2.0",
"@tauri-apps/plugin-updater": "2.5.1",
"@vueuse/core": "13.7.0",

977
packages/hoppscotch-desktop/src-tauri/Cargo.lock generated
View file

File diff suppressed because it is too large Load diff

2
packages/hoppscotch-desktop/src-tauri/Cargo.toml
View file

@ -19,7 +19,7 @@ tauri-build = { version = "2", features = [] }
[dependencies]
tauri = { version = "2", features = ["devtools"] }
tauri-plugin-shell = { version = "2", features = [] }
tauri-plugin-shell = { version = "2.2.1", features = [] }
serde = { version = "1", features = ["derive"] }
serde_json = { version = "1", features = [] }
tracing = "0.1.41"

2
packages/hoppscotch-kernel/package.json
View file

@ -53,7 +53,7 @@
"aws4fetch": "1.0.20",
"zod": "3.25.32",
"superjson": "2.2.2",
"@tauri-apps/plugin-shell": "2.0.1",
"@tauri-apps/plugin-shell": "2.2.1",
"@tauri-apps/plugin-dialog": "2.0.1",
"@tauri-apps/plugin-fs": "2.0.2",
"@tauri-apps/plugin-store": "2.2.0",

2
packages/hoppscotch-selfhost-web/package.json
View file

@ -34,7 +34,7 @@
"@tauri-apps/api": "2.1.1",
"@tauri-apps/plugin-dialog": "2.0.1",
"@tauri-apps/plugin-fs": "2.0.2",
"@tauri-apps/plugin-shell": "2.0.1",
"@tauri-apps/plugin-shell": "2.2.1",
"@vueuse/core": "13.7.0",
"axios": "1.12.2",
"buffer": "6.0.3",

29
pnpm-lock.yaml
View file

@ -81,8 +81,8 @@ importers:
specifier: 2.1.1
version: 2.1.1
'@tauri-apps/plugin-shell':
specifier: ^2.0.0
version: 2.0.0
specifier: ^2.2.1
version: 2.2.1
'@vueuse/core':
specifier: 13.7.0
version: 13.7.0(vue@3.5.20(typescript@5.9.2))
@ -998,8 +998,8 @@ importers:
specifier: 2.2.0
version: 2.2.0
'@tauri-apps/plugin-shell':
specifier: 2.0.1
version: 2.0.1
specifier: 2.2.1
version: 2.2.1
'@tauri-apps/plugin-store':
specifier: 2.2.0
version: 2.2.0
@ -1231,8 +1231,8 @@ importers:
specifier: 2.0.2
version: 2.0.2
'@tauri-apps/plugin-shell':
specifier: 2.0.1
version: 2.0.1
specifier: 2.2.1
version: 2.2.1
'@tauri-apps/plugin-store':
specifier: 2.2.0
version: 2.2.0
@ -1503,8 +1503,8 @@ importers:
specifier: 2.0.2
version: 2.0.2
'@tauri-apps/plugin-shell':
specifier: 2.0.1
version: 2.0.1
specifier: 2.2.1
version: 2.2.1
'@vueuse/core':
specifier: 13.7.0
version: 13.7.0(vue@3.5.20(typescript@5.9.2))
@ -6979,11 +6979,8 @@ packages:
'@tauri-apps/plugin-process@2.2.0':
resolution: {integrity: sha512-uypN2Crmyop9z+KRJr3zl71OyVFgTuvHFjsJ0UxxQ/J5212jVa5w4nPEYjIewcn8bUEXacRebwE6F7owgrbhSw==}
'@tauri-apps/plugin-shell@2.0.0':
resolution: {integrity: sha512-OpW2+ycgJLrEoZityWeWYk+6ZWP9VyiAfbO+N/O8VfLkqyOym8kXh7odKDfINx9RAotkSGBtQM4abyKfJDkcUg==}
'@tauri-apps/plugin-shell@2.0.1':
resolution: {integrity: sha512-akU1b77sw3qHiynrK0s930y8zKmcdrSD60htjH+mFZqv5WaakZA/XxHR3/sF1nNv9Mgmt/Shls37HwnOr00aSw==}
'@tauri-apps/plugin-shell@2.2.1':
resolution: {integrity: sha512-G1GFYyWe/KlCsymuLiNImUgC8zGY0tI0Y3p8JgBCWduR5IEXlIJS+JuG1qtveitwYXlfJrsExt3enhv5l2/yhA==}
'@tauri-apps/plugin-store@2.2.0':
resolution: {integrity: sha512-hJTRtuJis4w5fW1dkcgftsYxKXK0+DbAqurZ3CURHG5WkAyyZgbxpeYctw12bbzF9ZbZREXZklPq8mocCC3Sgg==}
@ -22493,11 +22490,7 @@ snapshots:
dependencies:
'@tauri-apps/api': 2.1.1
'@tauri-apps/plugin-shell@2.0.0':
dependencies:
'@tauri-apps/api': 2.1.1
'@tauri-apps/plugin-shell@2.0.1':
'@tauri-apps/plugin-shell@2.2.1':
dependencies:
'@tauri-apps/api': 2.1.1